We compared Cisco Secure Network Analytics and ExtraHop Reveal(x) across 5 parameters based on our user reviews. After reading the collected data, you can find our conclusion below:
Cisco Secure Network Analytics users highly value its advanced threat detection capabilities, extensive visibility and control over network traffic, and proactive alerting system. They appreciate the commendable customer service and support provided by Cisco Secure Network Analytics. ExtraHop Reveal(x) also offers robust network visibility and real-time threat detection.
Initial Setup and Support: Cisco Secure Network Analytics has a relatively quick and simple setup process that typically takes one to two weeks for deployment. ExtraHop Reveal(x) setup can be more complex and time-consuming, often taking about a week to complete due to the involvement of network taps and packet brokers. Cisco Secure Network Analytics provides a range of management options and support services, including workshops for a better understanding of solutions. They also experience stability issues in new versions. ExtraHop Reveal(x) excels in efficiency and troubleshooting capabilities of their support team, although there are occasional sporadic support feedback.
Valuable Features: Cisco Secure Network Analytics is praised for its advanced threat detection capabilities, proactive alerting system, and effective security incident response. ExtraHop Reveal(x) stands out for its robust network visibility, comprehensive analytics capabilities, and data-driven decision-making features.
Room For Improvement: Cisco Secure Network Analytics could benefit from improvements in data processing speed, better visualization features, and advanced threat detection capabilities. ExtraHop Reveal(x) needs enhancements in user interface, accuracy, responsiveness, documentation, and customer support.
Setup Cost: Cisco Secure Network Analytics has been considered reasonable and competitive, yet with a potentially higher initial setup cost. ExtraHop Reveal(x) is praised for its relatively low setup cost, making implementation easy and cost-effective.
ROI: The ROI from Cisco Secure Network Analytics has been significant, providing improved network security, reduced risks, advanced analytics capabilities, and reliable support. ExtraHop Reveal(x) excels in network visibility, anomaly detection, and user-friendly interface.
The summary above is based on interviews we conducted recently with Cisco Secure Network Analytics and ExtraHop Reveal(x) users. To access the review's full transcripts, download our report.
"The most valuable features provided by this solution are visibility and information."
"Cisco Secure Network Analytics has increased the visibility of what is happening in our network, and I think that's the most important reason to use it. We can see what is really happening instead of just looking at numbers from routers or switches."
"It's a dependable product that is able to pinpoint where we have vulnerabilities if they occur."
"Visibility. The ability to look East and West. To see what is passing through your circuits, where it is coming from, and how big it is."
"Overall, the implementation is very good."
"The most valuable feature is anomaly detection, where it finds things that are not allowed internally."
"Cisco Stealthwatch has predefined alerts for different types of security issues that might happen in the network. Whether it's PCs or servers that are used for botnets or Bitcoin mining we receive the alerts automatically. This functionality is what we receive from the solution out of the box."
"If you are using Darktrace or NAC solutions you can integrate Stealthwatch."
"The security features of this solution are the most valuable."
"ExtraHop Reveal(x) is one of the tools that works out of the box when it comes to threat hunting."
"Reveal X integrates seamlessly with CrowdStrike. If you see something sketchy on the network, you can quarantine devices through ExtraHop and it'll push to the CrowdStrike server."
"The solution's initial setup process is easy."
"When there are performance issues with an HTTP app, ExtraHop enables us to identify the causes within a few minutes. We can see what transactions are being impacted by something that may be happening within the server environment."
"It's a wire analytics tool. We use it for isolating and determining issues on our network or applications. It does a lot for crediting the network as opposed to discrediting the network. A lot of people come along and say that it's a network issue. It's always considered to be a network issue, but by using ExtraHop, we can quickly tell them that it's not a networking issue. It's something to do with your application or something at the other end. It could be a database issue. This tool gives us the ability to pinpoint with great accuracy the comings and goings on our network."
"We had useful information within the hour of deployment. The ability to trace back for historical analysis, as well as the behavioral analysis done with the security information, puts the user in a position to make an informed decision to mitigate the performance or security incidents. Regarding the security incidents, Reveal (x) is able to create incident cards that guide your teams through the incidents and gives you the option to delve into the transaction detail to potentially view payloads as well."
"The most valuable features of ExtraHop Reveal(x) are the detection and alerting of network behavior and anomalies."
"Better integration between Cisco Secure Network Analytics and Cisco Secure Workload would be beneficial."
"Cisco could improve the administration for the customers."
"I would like to see better filters."
"I would like to see it better organized when I'm looking at it."
"One area that could be improved in SNA is the integration with Cisco ISE for user and session details, which currently requires additional setup."
"We had some trouble with the installation as we migrated from our previous solution."
"Cisco Stealthwatch can improve by having bundled packages for popular add-ons. It would be a lot easier for people implementing it, have let's say a better way to use the product."
"Cisco Stealthwatch needs more integration with device discovery. We have to do a lot of hard work to figure out what things are. Better service integration is required."
"There is a little training online, but it'd be cool if ExtraHop provided certifications. CrowdStrike does elective training that gives you a certification as a Falcon administrator. It'd be nice to see ExtraHop have something like that"
"ExtraHop Reveal(x) could improve by allowing a longer look back in the feature. Right now you have a limit of 30 days to look back on your activity. I've used Darktrace before, and they allow you the ability to play back events. This would be a good feature to have in ExtraHop Reveal(x)."
"The solution's reporting part and GUI are areas with certain shortcomings where improvements are required."
"Netflow - Processing Netflow can be cumbersome as it requires triggers to truly gain value and insight. This in turn can add a bit of load to the hardware. The focus of ExtraHop Reveal (x) is live packet data."
"The solution should include more support protocols."
"The solution’s pricing could be improved."
"It needs integration with more security vendors."
"Agent management could certainly use some focus. It should also be a little bit easier to work with collections. We should be able to nest collections within collections. There should be better nesting."
More Cisco Secure Network Analytics Pricing and Cost Advice →
Cisco Secure Network Analytics is ranked 4th in Network Traffic Analysis (NTA) with 58 reviews while ExtraHop Reveal(x) is ranked 5th in Network Traffic Analysis (NTA) with 12 reviews. Cisco Secure Network Analytics is rated 8.2, while ExtraHop Reveal(x) is rated 8.6. The top reviewer of Cisco Secure Network Analytics writes "Increased the visibility of what is happening in our network". On the other hand, the top reviewer of ExtraHop Reveal(x) writes "It helps you visualize how data moves across your network". Cisco Secure Network Analytics is most compared with Darktrace, Cisco Secure Cloud Analytics, ThousandEyes, Vectra AI and Cisco Cognitive Threat Analytics, whereas ExtraHop Reveal(x) is most compared with Darktrace, Vectra AI, Corelight, Arista NDR and ExtraHop Reveal(x) 360. See our Cisco Secure Network Analytics vs. ExtraHop Reveal(x) report.
See our list of best Network Traffic Analysis (NTA) vendors and best Network Detection and Response (NDR) vendors.
We monitor all Network Traffic Analysis (NTA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.